Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/855B1FDAA1FC11E9996B2631F8AEA228.roa
File: 855B1FDAA1FC11E9996B2631F8AEA228.roa (raw, json)
Hash identifier: d6quR4ZOD/AZRRTPucJo0+JBswrd9AK8XfuC8G+y4cw=
Subject key identifier: D0:92:AC:37:4D:BF:4B:70:4D:12:2C:B2:1C:7E:99:60:97:5E:4C:F6
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 0163
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/855B1FDAA1FC11E9996B2631F8AEA228.roa
Signing time: Tue 09 Jul 2019 03:49:15 +0000
ROA not before: Tue 09 Jul 2019 03:49:09 +0000
ROA not after: Sat 09 Jul 2022 03:49:09 +0000
asID: 19844
IP address blocks: 154.16.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 9 03:49:09 2019 GMT
Not After : Jul 9 03:49:09 2022 GMT
Subject: CN=5d240ebb-ffd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fd:a5:bf:bc:41:e8:73:65:4c:ed:30:e7:21:
98:c0:25:bf:58:4e:f0:a6:d1:e9:c6:5c:a5:2c:f9:
e8:6c:db:41:1a:b3:5a:cf:00:e5:a5:4b:9c:29:3d:
07:5e:28:7b:ab:6f:ba:7a:c0:07:af:cc:5e:14:51:
da:cd:f1:c5:11:39:33:ef:f4:00:f9:a2:48:70:15:
fa:96:d1:34:4d:f1:49:1d:98:c8:d1:20:c3:4d:1c:
8a:f6:50:bd:3a:ab:27:00:93:72:20:e1:ac:8b:9b:
c0:25:4c:25:d1:1e:49:09:02:c4:35:4b:f8:df:00:
81:ce:a1:b1:ae:c6:24:16:6a:fd:0b:49:00:82:13:
9c:ff:70:f1:68:08:dc:4c:61:3b:ce:94:1b:0b:61:
2f:d9:e4:81:08:9b:4a:64:e8:10:cf:12:7e:02:35:
da:d7:c9:4c:88:7a:f3:26:ad:de:64:34:47:06:1f:
6e:26:f5:ba:fa:ff:64:26:c7:86:1f:6d:43:f9:90:
d5:50:2a:27:9d:60:95:f2:b1:c3:ac:0a:e3:9c:7e:
fa:2d:6c:cc:22:42:ea:6c:fe:b1:f8:a1:3c:ae:5f:
9d:50:27:4d:0a:cb:df:f3:8f:df:e6:f6:67:37:d0:
2c:e6:39:87:3e:c4:48:97:1c:12:c9:09:b8:92:73:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:AC:37:4D:BF:4B:70:4D:12:2C:B2:1C:7E:99:60:97:5E:4C:F6
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/855B1FDAA1FC11E9996B2631F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.16.245.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:aa:7e:35:7f:fb:34:04:db:9a:70:45:4a:f1:ae:38:a2:3c:
44:02:b0:8f:72:c8:64:05:f9:3d:76:c4:1a:5c:31:7d:4e:e2:
9d:b3:8a:39:46:34:9b:76:51:80:7c:d9:32:35:78:b7:a1:e0:
80:af:9c:0f:c7:3f:00:e6:2c:1b:3e:82:01:77:f4:44:6d:ba:
77:38:16:83:6e:4d:24:d8:18:e7:5e:38:bc:99:9a:c3:78:97:
b7:91:f7:28:0a:1d:78:d6:bd:58:13:4b:e6:3f:98:73:9e:bc:
ec:5f:c6:25:db:07:97:20:a3:dc:a2:69:c1:bb:39:36:29:04:
10:b3:c3:3d:4f:c3:44:f3:91:35:b7:d1:15:f0:6f:94:ef:e7:
a4:83:74:d9:a4:df:bc:8f:74:25:f6:23:87:15:b4:d4:06:2f:
ca:9f:a0:0f:9e:51:62:b1:85:4e:81:41:6b:79:4b:d4:15:39:
d9:8f:84:f6:34:12:84:e2:ed:d1:40:68:4f:f2:28:b7:b5:7e:
a4:10:fe:ab:d0:70:b4:32:ef:5c:de:5f:e6:ba:b2:d4:ec:fd:
20:0c:5f:b9:96:d2:e8:27:a8:9a:5c:c6:51:22:00:87:29:33:
a0:d1:57:c2:d8:e7:39:9e:76:bc:33:07:8c:96:44:a5:d3:4e:
df:37:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org